@daski/x402-scheme 0.1.0

package/dist/policy.d.ts

@@ -0,0 +1,113 @@
+/**
+ * §4 — the policy validator.
+ *
+ * The one rule: the server proposes, the bridge validates against its *own*
+ * expectations, recomputes what it can derive, and only then signs. Every
+ * expectation in `PolicyConfig` is config- or catalog-sourced. Nothing in
+ * here may be read out of the challenge being validated — that would be
+ * asking the counterparty to grade its own homework.
+ */
+import { type Address, type Hex } from "viem";
+import { type OrderBinding } from "./binding.js";
+import { type TransferAuthorization, type TypedDataRequest } from "./eip712.js";
+/** USDC and every asset this rail settles in carry 6 decimals. */
+export declare const USDC_DECIMALS = 6;
+/** Defaults for §4.1 check 6. Config may tighten these, never loosen them. */
+export declare const DEFAULT_MAX_AUTHORIZATION_LIFETIME_SECONDS = 900;
+export declare const DEFAULT_MIN_AUTHORIZATION_LIFETIME_SECONDS = 15;
+export declare const DEFAULT_MAX_BACKDATE_SECONDS = 3600;
+/**
+ * The splitter an outcome pays into, resolved independently of the challenge:
+ * once from `daski_get_outcome`, once from `.well-known/daski-chain.json`.
+ * Both must agree and both must name the address being paid (§4.1 check 4).
+ */
+export interface SplitterEvidence {
+    /** `splitterAddress` / `payTo` from `daski_get_outcome`. */
+    fromOutcome: Address;
+    /** The matching outcome entry in `.well-known/daski-chain.json`. */
+    fromChainManifest: Address;
+}
+/** Resolves splitter evidence for a provider+outcome pair. Implementations
+ *  cache with a TTL; the validator itself holds no cache. */
+export type SplitterResolver = (providerAgentId: string, outcomeId: string) => Promise<SplitterEvidence>;
+/**
+ * The running spend ledger. `@daski/pay` backs this with the on-disk order
+ * store; a host app may back it with anything, but it must be real — the
+ * session cap is meaningless if the total always reads zero.
+ */
+export interface SessionLedger {
+    /** Atomic units already authorized in this session. */
+    spentAtomic(): Promise<bigint> | bigint;
+    /** True when an order already exists for this payment identifier. */
+    hasOrderFor(paymentIdentifier: string): Promise<boolean> | boolean;
+}
+/**
+ * The host-supplied policy. No config, no signing: both packages refuse to
+ * construct a signer without one.
+ *
+ * The three caps are human-owned (§4.2). Nothing at runtime may raise them:
+ * `@daski/pay` reads them only from `~/.daski/config.json`, and flags may
+ * lower them for a single invocation but never raise them.
+ */
+export interface PolicyConfig {
+    /** The address that must appear as `message.from`. */
+    payerAddress: Address;
+    /** Pinned chain id for the active profile (sandbox: 84532). */
+    chainId: number;
+    /** Pinned canonical token for the active profile (sandbox USDC). */
+    canonicalToken: Address;
+    /** Human-owned per-order ceiling, as a decimal USDC string. */
+    maxPerOrderUsdc: string;
+    /** Human-owned session ceiling, as a decimal USDC string. */
+    sessionCapUsdc: string;
+    /** Independent splitter evidence. Required for purchase authorizations. */
+    resolveSplitter: SplitterResolver;
+    /** Running spend and prior-order lookup. */
+    session: SessionLedger;
+    /** Tighter-than-default authorization window bounds, if desired. */
+    maxAuthorizationLifetimeSeconds?: number;
+    minAuthorizationLifetimeSeconds?: number;
+    maxBackdateSeconds?: number;
+}
+/** The purchase-specific facts the validator checks a proposal against. */
+export interface PurchaseExpectations {
+    providerAgentId: string;
+    outcomeId: string;
+    /** `accepts[].amount` from the challenge, in atomic units. */
+    challengeAmountAtomic: bigint;
+    /** `accepts[].asset` from the challenge. */
+    challengeAsset: Address;
+    /** `accepts[].payTo` from the challenge. */
+    challengePayTo: Address;
+    /** `accepts[].network` from the challenge. */
+    challengeNetwork: string;
+    /** The quote a human actually approved, in atomic units. */
+    approvedQuoteAtomic: bigint;
+    /** The `payment-identifier` id this purchase carries, if any. */
+    paymentIdentifier?: string | undefined;
+    /** The parsed order binding, when the challenge carried one. */
+    binding?: OrderBinding | undefined;
+    /** Seconds since epoch; injectable so tests are not clock-dependent. */
+    nowSeconds?: number;
+}
+export interface ValidatedPurchase {
+    authorization: TransferAuthorization;
+    binding: OrderBinding | undefined;
+    amountAtomic: bigint;
+    /** The nonce the bridge recomputed. Equal to the proposal's, or we refused. */
+    recomputedNonce: Hex;
+}
+declare function atomic(usdc: string, field: string): bigint;
+declare function formatUsdc(value: bigint): string;
+/**
+ * Validates a proposed purchase authorization against every §4.1 assertion,
+ * then recomputes the recipe nonce and requires equality.
+ *
+ * Returns the authorization the caller may sign. Throws `PolicyRefusal` —
+ * never a repaired payload — on any failure.
+ */
+export declare function validatePurchaseAuthorization(config: PolicyConfig, proposal: TypedDataRequest, expectations: PurchaseExpectations): Promise<ValidatedPurchase>;
+/** Parses the binding out of a challenge's extensions, refusing open shapes. */
+export declare function bindingFromExtensions(extensions: Record<string, unknown> | undefined): OrderBinding | undefined;
+export { formatUsdc, atomic as parseUsdcToAtomic };
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAA0B,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AAIrB,kEAAkE;AAClE,eAAO,MAAM,aAAa,IAAI,CAAC;AAE/B,8EAA8E;AAC9E,eAAO,MAAM,0CAA0C,MAAM,CAAC;AAC9D,eAAO,MAAM,0CAA0C,KAAK,CAAC;AAC7D,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAIjD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,WAAW,EAAE,OAAO,CAAC;IACrB,oEAAoE;IACpE,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED;6DAC6D;AAC7D,MAAM,MAAM,gBAAgB,GAAG,CAC7B,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAE/B;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACxC,qEAAqE;IACrE,WAAW,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACpE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,sDAAsD;IACtD,YAAY,EAAE,OAAO,CAAC;IACtB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,cAAc,EAAE,OAAO,CAAC;IACxB,+DAA+D;IAC/D,eAAe,EAAE,MAAM,CAAC;IACxB,6DAA6D;IAC7D,cAAc,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,eAAe,EAAE,gBAAgB,CAAC;IAClC,4CAA4C;IAC5C,OAAO,EAAE,aAAa,CAAC;IACvB,oEAAoE;IACpE,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,2EAA2E;AAC3E,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,qBAAqB,EAAE,MAAM,CAAC;IAC9B,4CAA4C;IAC5C,cAAc,EAAE,OAAO,CAAC;IACxB,4CAA4C;IAC5C,cAAc,EAAE,OAAO,CAAC;IACxB,8CAA8C;IAC9C,gBAAgB,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,gEAAgE;IAChE,OAAO,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACnC,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,qBAAqB,CAAC;IACrC,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,eAAe,EAAE,GAAG,CAAC;CACtB;AAED,iBAAS,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAYnD;AAED,iBAAS,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOzC;AAED;;;;;;GAMG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,gBAAgB,EAC1B,YAAY,EAAE,oBAAoB,GACjC,OAAO,CAAC,iBAAiB,CAAC,CA0S5B;AAED,gFAAgF;AAChF,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC9C,YAAY,GAAG,SAAS,CAE1B;AA0CD,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC"}

package/dist/policy.js

@@ -0,0 +1,357 @@
+/**
+ * §4 — the policy validator.
+ *
+ * The one rule: the server proposes, the bridge validates against its *own*
+ * expectations, recomputes what it can derive, and only then signs. Every
+ * expectation in `PolicyConfig` is config- or catalog-sourced. Nothing in
+ * here may be read out of the challenge being validated — that would be
+ * asking the counterparty to grade its own homework.
+ */
+import { getAddress, parseUnits } from "viem";
+import { parseOrderBinding } from "./binding.js";
+import { AUTHORIZATION_FIELDS, isClosedTransferWithAuthorizationTypes, TRANSFER_WITH_AUTHORIZATION_PRIMARY_TYPE, } from "./eip712.js";
+import { refuse } from "./errors.js";
+import { deriveBindingNonce } from "./recipe.js";
+/** USDC and every asset this rail settles in carry 6 decimals. */
+export const USDC_DECIMALS = 6;
+/** Defaults for §4.1 check 6. Config may tighten these, never loosen them. */
+export const DEFAULT_MAX_AUTHORIZATION_LIFETIME_SECONDS = 900;
+export const DEFAULT_MIN_AUTHORIZATION_LIFETIME_SECONDS = 15;
+export const DEFAULT_MAX_BACKDATE_SECONDS = 3600;
+const DOC = "https://github.com/daski-io/buyer/blob/main/docs/policy.md";
+function atomic(usdc, field) {
+    try {
+        return parseUnits(usdc, USDC_DECIMALS);
+    }
+    catch {
+        return refuse({
+            check: "amount-and-caps",
+            code: "DASKI_POLICY_CAP_UNPARSEABLE",
+            expected: `${field} to be a decimal USDC amount, e.g. "25.00"`,
+            actual: `${field}=${usdc}`,
+            remediation: `Fix ${field} in ~/.daski/config.json; see ${DOC}#caps`,
+        });
+    }
+}
+function formatUsdc(value) {
+    const negative = value < 0n;
+    const magnitude = negative ? -value : value;
+    const unit = 10n ** BigInt(USDC_DECIMALS);
+    const whole = magnitude / unit;
+    const fraction = (magnitude % unit).toString().padStart(USDC_DECIMALS, "0").replace(/0+$/, "");
+    return `${negative ? "-" : ""}${whole}${fraction ? `.${fraction}` : ""} USDC`;
+}
+/**
+ * Validates a proposed purchase authorization against every §4.1 assertion,
+ * then recomputes the recipe nonce and requires equality.
+ *
+ * Returns the authorization the caller may sign. Throws `PolicyRefusal` —
+ * never a repaired payload — on any failure.
+ */
+export async function validatePurchaseAuthorization(config, proposal, expectations) {
+    const now = expectations.nowSeconds ?? Math.floor(Date.now() / 1_000);
+    // -- §4.1.1 chain and verifying contract are pinned by profile ------------
+    if (proposal.domain.chainId !== config.chainId) {
+        refuse({
+            check: "chain-pinning",
+            code: "DASKI_POLICY_CHAIN_MISMATCH",
+            expected: `chainId ${config.chainId}`,
+            actual: `chainId ${String(proposal.domain.chainId)}`,
+            remediation: "The challenge targets a different chain than the active profile. " +
+                `Switch profiles or refuse the purchase; see ${DOC}#chain-pinning`,
+        });
+    }
+    const verifyingContract = safeAddress(proposal.domain.verifyingContract, "domain.verifyingContract");
+    if (verifyingContract !== getAddress(config.canonicalToken)) {
+        refuse({
+            check: "chain-pinning",
+            code: "DASKI_POLICY_TOKEN_NOT_CANONICAL",
+            expected: `verifyingContract ${getAddress(config.canonicalToken)}`,
+            actual: `verifyingContract ${verifyingContract}`,
+            remediation: "Only the profile's canonical USDC contract may be signed against. " +
+                `See ${DOC}#chain-pinning`,
+        });
+    }
+    const challengeAsset = safeAddress(expectations.challengeAsset, "accepts[].asset");
+    if (challengeAsset !== getAddress(config.canonicalToken)) {
+        refuse({
+            check: "chain-pinning",
+            code: "DASKI_POLICY_ASSET_NOT_CANONICAL",
+            expected: `asset ${getAddress(config.canonicalToken)}`,
+            actual: `asset ${challengeAsset}`,
+            remediation: `Non-canonical assets are never signed; see ${DOC}#chain-pinning`,
+        });
+    }
+    if (expectations.challengeNetwork !== `eip155:${config.chainId}`) {
+        refuse({
+            check: "chain-pinning",
+            code: "DASKI_POLICY_NETWORK_MISMATCH",
+            expected: `network eip155:${config.chainId}`,
+            actual: `network ${expectations.challengeNetwork}`,
+            remediation: `See ${DOC}#chain-pinning`,
+        });
+    }
+    // -- §4.1.2 the closed 6-field type set, and nothing else -----------------
+    if (proposal.primaryType !== TRANSFER_WITH_AUTHORIZATION_PRIMARY_TYPE) {
+        refuse({
+            check: "typed-data-shape",
+            code: "DASKI_POLICY_PRIMARY_TYPE_MISMATCH",
+            expected: TRANSFER_WITH_AUTHORIZATION_PRIMARY_TYPE,
+            actual: String(proposal.primaryType),
+            remediation: "This bridge signs exactly one purchase type. Anything else must be " +
+                `refused; see ${DOC}#typed-data-shape`,
+        });
+    }
+    if (!isClosedTransferWithAuthorizationTypes(proposal.types)) {
+        refuse({
+            check: "typed-data-shape",
+            code: "DASKI_POLICY_TYPES_NOT_CLOSED",
+            expected: "the closed 6-field TransferWithAuthorization type set",
+            actual: `types=${JSON.stringify(proposal.types)}`,
+            remediation: "An altered or extended type set changes what the signature means. " +
+                `See ${DOC}#typed-data-shape`,
+        });
+    }
+    const messageKeys = Object.keys(proposal.message).sort();
+    if (messageKeys.join(",") !== [...AUTHORIZATION_FIELDS].sort().join(",")) {
+        refuse({
+            check: "typed-data-shape",
+            code: "DASKI_POLICY_MESSAGE_OPEN_SHAPE",
+            expected: `exactly [${[...AUTHORIZATION_FIELDS].sort().join(", ")}]`,
+            actual: `[${messageKeys.join(", ")}]`,
+            remediation: `See ${DOC}#typed-data-shape`,
+        });
+    }
+    // -- §4.1.3 the payer is our own configured address -----------------------
+    const from = safeAddress(proposal.message.from, "message.from");
+    if (from !== getAddress(config.payerAddress)) {
+        refuse({
+            check: "payer-match",
+            code: "DASKI_POLICY_PAYER_MISMATCH",
+            expected: `from ${getAddress(config.payerAddress)}`,
+            actual: `from ${from}`,
+            remediation: "The challenge names a different payer than the active signer. Run " +
+                `\`daski doctor --json\` to see the active address; see ${DOC}#payer`,
+        });
+    }
+    // -- §4.1.4 the recipient is an allowlisted splitter ----------------------
+    const to = safeAddress(proposal.message.to, "message.to");
+    const challengePayTo = safeAddress(expectations.challengePayTo, "accepts[].payTo");
+    if (to !== challengePayTo) {
+        refuse({
+            check: "splitter-allowlist",
+            code: "DASKI_POLICY_PAYTO_MISMATCH",
+            expected: `to ${challengePayTo} (the challenge's accepts[].payTo)`,
+            actual: `to ${to}`,
+            remediation: `See ${DOC}#splitter-allowlist`,
+        });
+    }
+    const evidence = await config.resolveSplitter(expectations.providerAgentId, expectations.outcomeId);
+    const fromOutcome = safeAddress(evidence.fromOutcome, "daski_get_outcome payTo");
+    const fromManifest = safeAddress(evidence.fromChainManifest, "daski-chain.json payTo");
+    if (fromOutcome !== fromManifest) {
+        refuse({
+            check: "splitter-allowlist",
+            code: "DASKI_POLICY_SPLITTER_EVIDENCE_DISAGREES",
+            expected: "daski_get_outcome and .well-known/daski-chain.json to name one splitter",
+            actual: `outcome=${fromOutcome} manifest=${fromManifest}`,
+            remediation: "Two independent sources disagree about who gets paid. Do not sign; " +
+                `report this to the gateway operator. See ${DOC}#splitter-allowlist`,
+        });
+    }
+    if (to !== fromOutcome) {
+        refuse({
+            check: "splitter-allowlist",
+            code: "DASKI_POLICY_SPLITTER_NOT_ALLOWLISTED",
+            expected: `to ${fromOutcome} for ${expectations.providerAgentId}/${expectations.outcomeId}`,
+            actual: `to ${to}`,
+            remediation: "The challenge pays an address the catalog does not list for this " +
+                `outcome. Do not sign; see ${DOC}#splitter-allowlist`,
+        });
+    }
+    // -- §4.1.5 amount matches the challenge, the approved quote, and the caps -
+    const value = safeUint(proposal.message.value, "message.value");
+    if (value !== expectations.challengeAmountAtomic) {
+        refuse({
+            check: "amount-and-caps",
+            code: "DASKI_POLICY_VALUE_MISMATCH",
+            expected: `value ${expectations.challengeAmountAtomic} (accepts[].amount)`,
+            actual: `value ${value}`,
+            remediation: `See ${DOC}#amount`,
+        });
+    }
+    if (value !== expectations.approvedQuoteAtomic) {
+        refuse({
+            check: "amount-and-caps",
+            code: "DASKI_POLICY_QUOTE_NOT_APPROVED",
+            expected: `value ${expectations.approvedQuoteAtomic} (${formatUsdc(expectations.approvedQuoteAtomic)}, the approved quote)`,
+            actual: `value ${value} (${formatUsdc(value)})`,
+            remediation: "The price moved between approval and signing. Re-run the purchase to " +
+                `approve the new quote; see ${DOC}#amount`,
+        });
+    }
+    const maxPerOrder = atomic(config.maxPerOrderUsdc, "maxPerOrderUsdc");
+    if (value > maxPerOrder) {
+        refuse({
+            check: "amount-and-caps",
+            code: "DASKI_POLICY_PER_ORDER_CAP_EXCEEDED",
+            expected: `at most ${formatUsdc(maxPerOrder)} per order`,
+            actual: formatUsdc(value),
+            remediation: "Caps are human-owned: raise `maxPerOrderUsdc` in ~/.daski/config.json " +
+                `by hand, or buy something cheaper. See ${DOC}#caps`,
+        });
+    }
+    const sessionCap = atomic(config.sessionCapUsdc, "sessionCapUsdc");
+    const spent = BigInt(await config.session.spentAtomic());
+    if (spent + value > sessionCap) {
+        refuse({
+            check: "amount-and-caps",
+            code: "DASKI_POLICY_SESSION_CAP_EXCEEDED",
+            expected: `session total at most ${formatUsdc(sessionCap)}`,
+            actual: `${formatUsdc(spent)} already authorized plus ${formatUsdc(value)}`,
+            remediation: "Caps are human-owned: raise `sessionCapUsdc` in ~/.daski/config.json " +
+                `by hand. See ${DOC}#caps`,
+        });
+    }
+    // -- §4.1.6 the authorization window is sane ------------------------------
+    const validAfter = safeUint(proposal.message.validAfter, "message.validAfter");
+    const validBefore = safeUint(proposal.message.validBefore, "message.validBefore");
+    const maxBackdate = BigInt(config.maxBackdateSeconds ?? DEFAULT_MAX_BACKDATE_SECONDS);
+    const maxLifetime = BigInt(config.maxAuthorizationLifetimeSeconds ?? DEFAULT_MAX_AUTHORIZATION_LIFETIME_SECONDS);
+    const minLifetime = BigInt(config.minAuthorizationLifetimeSeconds ?? DEFAULT_MIN_AUTHORIZATION_LIFETIME_SECONDS);
+    const nowBig = BigInt(now);
+    if (validAfter !== 0n && (validAfter < nowBig - maxBackdate || validAfter > nowBig)) {
+        refuse({
+            check: "authorization-window",
+            code: "DASKI_POLICY_VALID_AFTER_OUT_OF_RANGE",
+            expected: `validAfter to be 0 or within [${nowBig - maxBackdate}, ${nowBig}]`,
+            actual: `validAfter ${validAfter}`,
+            remediation: "A back- or future-dated authorization is not one this bridge will " +
+                `sign; request a fresh challenge. See ${DOC}#window`,
+        });
+    }
+    const lifetime = validBefore - nowBig;
+    if (lifetime > maxLifetime) {
+        refuse({
+            check: "authorization-window",
+            code: "DASKI_POLICY_WINDOW_TOO_LONG",
+            expected: `validBefore at most ${maxLifetime}s out`,
+            actual: `${lifetime}s out`,
+            remediation: "A long-lived authorization is a long-lived liability; request a " +
+                `shorter challenge. See ${DOC}#window`,
+        });
+    }
+    if (lifetime <= minLifetime) {
+        refuse({
+            check: "authorization-window",
+            code: "DASKI_POLICY_WINDOW_TOO_SHORT",
+            expected: `validBefore more than ${minLifetime}s out`,
+            actual: `${lifetime}s out`,
+            remediation: "This challenge expires too soon to settle safely; request a fresh " +
+                `one. See ${DOC}#window`,
+        });
+    }
+    // -- §4.1.7 the payment identifier is ours, and unspent -------------------
+    if (expectations.paymentIdentifier !== undefined) {
+        if (await config.session.hasOrderFor(expectations.paymentIdentifier)) {
+            refuse({
+                check: "payment-identifier",
+                code: "DASKI_POLICY_IDENTIFIER_ALREADY_ORDERED",
+                expected: "an unused payment identifier",
+                actual: `identifier ${expectations.paymentIdentifier} already has a stored order`,
+                remediation: "An order already exists for this intent. Reconcile before re-signing: " +
+                    `run \`daski order status <handle>\`. See ${DOC}#reconciliation`,
+            });
+        }
+    }
+    // -- §4.3 recompute the recipe nonce and require equality -----------------
+    const nonce = safeHex32(proposal.message.nonce, "message.nonce");
+    const binding = expectations.binding;
+    let recomputedNonce = nonce;
+    if (binding) {
+        if (BigInt(binding.expiresAt) < validBefore) {
+            refuse({
+                check: "authorization-window",
+                code: "DASKI_POLICY_WINDOW_OUTLIVES_BINDING",
+                expected: `validBefore at most the binding's expiresAt ${binding.expiresAt}`,
+                actual: `validBefore ${validBefore}`,
+                remediation: "The authorization would outlive the deal it is bound to; request a " +
+                    `fresh challenge. See ${DOC}#window`,
+            });
+        }
+        recomputedNonce = deriveBindingNonce(binding, {
+            chainId: config.chainId,
+            canonicalToken: getAddress(config.canonicalToken),
+            payer: from,
+            splitter: to,
+            grossAmount: value,
+        });
+        if (recomputedNonce.toLowerCase() !== nonce.toLowerCase()) {
+            refuse({
+                check: "recipe-recompute",
+                code: "DASKI_POLICY_RECIPE_NONCE_MISMATCH",
+                expected: `nonce ${recomputedNonce} (recomputed from the ${binding.profile} binding)`,
+                actual: `nonce ${nonce}`,
+                remediation: "The proposed nonce does not commit to the deal we were shown. This " +
+                    "is exactly the case blind signing would miss. Do not retry; report " +
+                    `it to the gateway operator. See ${DOC}#recipe`,
+            });
+        }
+    }
+    return {
+        authorization: {
+            from,
+            to,
+            value: value.toString(),
+            validAfter: validAfter.toString(),
+            validBefore: validBefore.toString(),
+            nonce,
+        },
+        binding,
+        amountAtomic: value,
+        recomputedNonce,
+    };
+}
+/** Parses the binding out of a challenge's extensions, refusing open shapes. */
+export function bindingFromExtensions(extensions) {
+    return parseOrderBinding(extensions?.["daski-order-binding"]);
+}
+function safeAddress(value, field) {
+    if (typeof value !== "string" || !/^0x[0-9a-fA-F]{40}$/.test(value)) {
+        refuse({
+            check: "typed-data-shape",
+            code: "DASKI_POLICY_MALFORMED_ADDRESS",
+            expected: `${field} to be a 20-byte hex address`,
+            actual: `${field}=${String(value)}`,
+            remediation: `Request a fresh challenge; see ${DOC}`,
+        });
+    }
+    return getAddress(value);
+}
+function safeUint(value, field) {
+    const raw = typeof value === "bigint" ? value.toString() : String(value);
+    if (!/^\d+$/.test(raw)) {
+        refuse({
+            check: "typed-data-shape",
+            code: "DASKI_POLICY_MALFORMED_UINT",
+            expected: `${field} to be a non-negative integer`,
+            actual: `${field}=${raw}`,
+            remediation: `Request a fresh challenge; see ${DOC}`,
+        });
+    }
+    return BigInt(raw);
+}
+function safeHex32(value, field) {
+    if (typeof value !== "string" || !/^0x[0-9a-fA-F]{64}$/.test(value)) {
+        refuse({
+            check: "typed-data-shape",
+            code: "DASKI_POLICY_MALFORMED_BYTES32",
+            expected: `${field} to be a 32-byte hex string`,
+            actual: `${field}=${String(value)}`,
+            remediation: `Request a fresh challenge; see ${DOC}`,
+        });
+    }
+    return value;
+}
+export { formatUsdc, atomic as parseUsdcToAtomic };
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAA0B,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAqB,MAAM,cAAc,CAAC;AACpE,OAAO,EACL,oBAAoB,EACpB,sCAAsC,EACtC,wCAAwC,GAGzC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,kEAAkE;AAClE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAE/B,8EAA8E;AAC9E,MAAM,CAAC,MAAM,0CAA0C,GAAG,GAAG,CAAC;AAC9D,MAAM,CAAC,MAAM,0CAA0C,GAAG,EAAE,CAAC;AAC7D,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD,MAAM,GAAG,GAAG,4DAA4D,CAAC;AA4FzE,SAAS,MAAM,CAAC,IAAY,EAAE,KAAa;IACzC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;YACZ,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,GAAG,KAAK,4CAA4C;YAC9D,MAAM,EAAE,GAAG,KAAK,IAAI,IAAI,EAAE;YAC1B,WAAW,EAAE,OAAO,KAAK,iCAAiC,GAAG,OAAO;SACrE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,QAAQ,GAAG,KAAK,GAAG,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC;IAC/B,MAAM,QAAQ,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/F,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAoB,EACpB,QAA0B,EAC1B,YAAkC;IAElC,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IAEtE,4EAA4E;IAC5E,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/C,MAAM,CAAC;YACL,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,WAAW,MAAM,CAAC,OAAO,EAAE;YACrC,MAAM,EAAE,WAAW,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;YACpD,WAAW,EACT,mEAAmE;gBACnE,+CAA+C,GAAG,gBAAgB;SACrE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,iBAAiB,GAAG,WAAW,CACnC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EACjC,0BAA0B,CAC3B,CAAC;IACF,IAAI,iBAAiB,KAAK,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC;YACL,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,kCAAkC;YACxC,QAAQ,EAAE,qBAAqB,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;YAClE,MAAM,EAAE,qBAAqB,iBAAiB,EAAE;YAChD,WAAW,EACT,oEAAoE;gBACpE,OAAO,GAAG,gBAAgB;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAAG,WAAW,CAAC,YAAY,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACnF,IAAI,cAAc,KAAK,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC;YACL,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,kCAAkC;YACxC,QAAQ,EAAE,SAAS,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;YACtD,MAAM,EAAE,SAAS,cAAc,EAAE;YACjC,WAAW,EAAE,8CAA8C,GAAG,gBAAgB;SAC/E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,YAAY,CAAC,gBAAgB,KAAK,UAAU,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,MAAM,CAAC;YACL,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,kBAAkB,MAAM,CAAC,OAAO,EAAE;YAC5C,MAAM,EAAE,WAAW,YAAY,CAAC,gBAAgB,EAAE;YAClD,WAAW,EAAE,OAAO,GAAG,gBAAgB;SACxC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,IAAI,QAAQ,CAAC,WAAW,KAAK,wCAAwC,EAAE,CAAC;QACtE,MAAM,CAAC;YACL,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,oCAAoC;YAC1C,QAAQ,EAAE,wCAAwC;YAClD,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YACpC,WAAW,EACT,qEAAqE;gBACrE,gBAAgB,GAAG,mBAAmB;SACzC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,sCAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC;YACL,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,uDAAuD;YACjE,MAAM,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YACjD,WAAW,EACT,oEAAoE;gBACpE,OAAO,GAAG,mBAAmB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzE,MAAM,CAAC;YACL,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,iCAAiC;YACvC,QAAQ,EAAE,YAAY,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACpE,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACrC,WAAW,EAAE,OAAO,GAAG,mBAAmB;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAChE,IAAI,IAAI,KAAK,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC;YACL,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,QAAQ,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE;YACnD,MAAM,EAAE,QAAQ,IAAI,EAAE;YACtB,WAAW,EACT,oEAAoE;gBACpE,0DAA0D,GAAG,QAAQ;SACxE,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,WAAW,CAAC,YAAY,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACnF,IAAI,EAAE,KAAK,cAAc,EAAE,CAAC;QAC1B,MAAM,CAAC;YACL,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,MAAM,cAAc,oCAAoC;YAClE,MAAM,EAAE,MAAM,EAAE,EAAE;YAClB,WAAW,EAAE,OAAO,GAAG,qBAAqB;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAC3C,YAAY,CAAC,eAAe,EAC5B,YAAY,CAAC,SAAS,CACvB,CAAC;IACF,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;IACjF,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;IACvF,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,CAAC;YACL,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,0CAA0C;YAChD,QAAQ,EAAE,yEAAyE;YACnF,MAAM,EAAE,WAAW,WAAW,aAAa,YAAY,EAAE;YACzD,WAAW,EACT,qEAAqE;gBACrE,4CAA4C,GAAG,qBAAqB;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;QACvB,MAAM,CAAC;YACL,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,uCAAuC;YAC7C,QAAQ,EAAE,MAAM,WAAW,QAAQ,YAAY,CAAC,eAAe,IAAI,YAAY,CAAC,SAAS,EAAE;YAC3F,MAAM,EAAE,MAAM,EAAE,EAAE;YAClB,WAAW,EACT,mEAAmE;gBACnE,6BAA6B,GAAG,qBAAqB;SACxD,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAChE,IAAI,KAAK,KAAK,YAAY,CAAC,qBAAqB,EAAE,CAAC;QACjD,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,SAAS,YAAY,CAAC,qBAAqB,qBAAqB;YAC1E,MAAM,EAAE,SAAS,KAAK,EAAE;YACxB,WAAW,EAAE,OAAO,GAAG,SAAS;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,KAAK,YAAY,CAAC,mBAAmB,EAAE,CAAC;QAC/C,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,iCAAiC;YACvC,QAAQ,EAAE,SAAS,YAAY,CAAC,mBAAmB,KAAK,UAAU,CAAC,YAAY,CAAC,mBAAmB,CAAC,uBAAuB;YAC3H,MAAM,EAAE,SAAS,KAAK,KAAK,UAAU,CAAC,KAAK,CAAC,GAAG;YAC/C,WAAW,EACT,uEAAuE;gBACvE,8BAA8B,GAAG,SAAS;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACtE,IAAI,KAAK,GAAG,WAAW,EAAE,CAAC;QACxB,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,qCAAqC;YAC3C,QAAQ,EAAE,WAAW,UAAU,CAAC,WAAW,CAAC,YAAY;YACxD,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;YACzB,WAAW,EACT,wEAAwE;gBACxE,0CAA0C,GAAG,OAAO;SACvD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACzD,IAAI,KAAK,GAAG,KAAK,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,mCAAmC;YACzC,QAAQ,EAAE,yBAAyB,UAAU,CAAC,UAAU,CAAC,EAAE;YAC3D,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,4BAA4B,UAAU,CAAC,KAAK,CAAC,EAAE;YAC3E,WAAW,EACT,uEAAuE;gBACvE,gBAAgB,GAAG,OAAO;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,IAAI,4BAA4B,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,MAAM,CACxB,MAAM,CAAC,+BAA+B,IAAI,0CAA0C,CACrF,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,CACxB,MAAM,CAAC,+BAA+B,IAAI,0CAA0C,CACrF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,UAAU,KAAK,EAAE,IAAI,CAAC,UAAU,GAAG,MAAM,GAAG,WAAW,IAAI,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC;YACL,KAAK,EAAE,sBAAsB;YAC7B,IAAI,EAAE,uCAAuC;YAC7C,QAAQ,EAAE,iCAAiC,MAAM,GAAG,WAAW,KAAK,MAAM,GAAG;YAC7E,MAAM,EAAE,cAAc,UAAU,EAAE;YAClC,WAAW,EACT,oEAAoE;gBACpE,wCAAwC,GAAG,SAAS;SACvD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,GAAG,MAAM,CAAC;IACtC,IAAI,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC3B,MAAM,CAAC;YACL,KAAK,EAAE,sBAAsB;YAC7B,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,uBAAuB,WAAW,OAAO;YACnD,MAAM,EAAE,GAAG,QAAQ,OAAO;YAC1B,WAAW,EACT,kEAAkE;gBAClE,0BAA0B,GAAG,SAAS;SACzC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,CAAC;YACL,KAAK,EAAE,sBAAsB;YAC7B,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,yBAAyB,WAAW,OAAO;YACrD,MAAM,EAAE,GAAG,QAAQ,OAAO;YAC1B,WAAW,EACT,oEAAoE;gBACpE,YAAY,GAAG,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,IAAI,YAAY,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACjD,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC;gBACL,KAAK,EAAE,oBAAoB;gBAC3B,IAAI,EAAE,yCAAyC;gBAC/C,QAAQ,EAAE,8BAA8B;gBACxC,MAAM,EAAE,cAAc,YAAY,CAAC,iBAAiB,6BAA6B;gBACjF,WAAW,EACT,wEAAwE;oBACxE,4CAA4C,GAAG,iBAAiB;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;IACrC,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,WAAW,EAAE,CAAC;YAC5C,MAAM,CAAC;gBACL,KAAK,EAAE,sBAAsB;gBAC7B,IAAI,EAAE,sCAAsC;gBAC5C,QAAQ,EAAE,+CAA+C,OAAO,CAAC,SAAS,EAAE;gBAC5E,MAAM,EAAE,eAAe,WAAW,EAAE;gBACpC,WAAW,EACT,qEAAqE;oBACrE,wBAAwB,GAAG,SAAS;aACvC,CAAC,CAAC;QACL,CAAC;QACD,eAAe,GAAG,kBAAkB,CAAC,OAAO,EAAE;YAC5C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC;YACjD,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,IAAI,eAAe,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1D,MAAM,CAAC;gBACL,KAAK,EAAE,kBAAkB;gBACzB,IAAI,EAAE,oCAAoC;gBAC1C,QAAQ,EAAE,SAAS,eAAe,yBAAyB,OAAO,CAAC,OAAO,WAAW;gBACrF,MAAM,EAAE,SAAS,KAAK,EAAE;gBACxB,WAAW,EACT,qEAAqE;oBACrE,qEAAqE;oBACrE,mCAAmC,GAAG,SAAS;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa,EAAE;YACb,IAAI;YACJ,EAAE;YACF,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;YACvB,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;YACjC,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;YACnC,KAAK;SACN;QACD,OAAO;QACP,YAAY,EAAE,KAAK;QACnB,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CACnC,UAA+C;IAE/C,OAAO,iBAAiB,CAAC,UAAU,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC;YACL,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,gCAAgC;YACtC,QAAQ,EAAE,GAAG,KAAK,8BAA8B;YAChD,MAAM,EAAE,GAAG,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE;YACnC,WAAW,EAAE,kCAAkC,GAAG,EAAE;SACrD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC;YACL,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,GAAG,KAAK,+BAA+B;YACjD,MAAM,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE;YACzB,WAAW,EAAE,kCAAkC,GAAG,EAAE;SACrD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC;YACL,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,gCAAgC;YACtC,QAAQ,EAAE,GAAG,KAAK,6BAA6B;YAC/C,MAAM,EAAE,GAAG,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE;YACnC,WAAW,EAAE,kCAAkC,GAAG,EAAE;SACrD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAY,CAAC;AACtB,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC"}

package/dist/recipe.d.ts

@@ -0,0 +1,40 @@
+/**
+ * §4.3 — local recipe recomputation, the verify-and-sign tier.
+ *
+ * The nonce of a Daski EIP-3009 authorization is not random: it is a
+ * commitment to the whole deal. Recomputing it locally is what lets the
+ * bridge sign a server-proposed authorization without trusting the server —
+ * if our nonce and theirs disagree, the deal we were shown is not the deal
+ * we would be signing, and we refuse.
+ *
+ * These two functions mirror the gateway's `recipeNonce` / `recipeNonceV2`
+ * byte for byte. Changing either is a protocol break, not a refactor.
+ */
+import { type Address, type Hex } from "viem";
+import type { OrderBinding, OrderBindingV1, OrderBindingV2 } from "./binding.js";
+/** `keccak256("DaskiStandardExactOrderV1")` — the v1 recipe domain separator. */
+export declare const RECIPE_NONCE_DOMAIN_V1: Hex;
+/** `keccak256("DaskiStandardExactOrderV2")` — the v2 recipe domain separator. */
+export declare const RECIPE_NONCE_DOMAIN_V2: Hex;
+/**
+ * The five payment facts the recipe binds that do not come from the binding
+ * extension. Each is independently known to the bridge: the chain and token
+ * are pinned by profile, the payer is our own signer, and the splitter and
+ * amount are what the policy validator has already allowlisted and capped.
+ */
+export interface RecipePaymentFacts {
+    chainId: number;
+    canonicalToken: Address;
+    payer: Address;
+    splitter: Address;
+    grossAmount: bigint;
+}
+export type RecipeNonceV1Input = RecipePaymentFacts & Pick<OrderBindingV1, "listingManifestHash" | "providerOfferHash" | "quoteHash" | "canonicalRequestHash" | "orderNonce">;
+export type RecipeNonceV2Input = RecipePaymentFacts & Pick<OrderBindingV2, "runtimeCommitmentHash" | "providerIntentHash" | "quoteHash" | "canonicalRequestHash" | "orderNonce">;
+/** `recipeNonce` — the v1 layout, for `recipe-bound-v1` listings. */
+export declare function recipeNonce(input: RecipeNonceV1Input): Hex;
+/** `recipeNonceV2` — the catalog-driven layout, for `recipe-bound-v2` listings. */
+export declare function recipeNonceV2(input: RecipeNonceV2Input): Hex;
+/** Recomputes the authorization nonce a binding commits to, at either version. */
+export declare function deriveBindingNonce(binding: OrderBinding, facts: RecipePaymentFacts): Hex;
+//# sourceMappingURL=recipe.d.ts.map

package/dist/recipe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipe.d.ts","sourceRoot":"","sources":["../src/recipe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAA+C,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEjF,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,EAAE,GAAyD,CAAC;AAC/F,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,EAAE,GAAyD,CAAC;AAE/F;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAyCD,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,GACjD,IAAI,CAAC,cAAc,EAAE,qBAAqB,GAAG,mBAAmB,GAAG,WAAW,GAC1E,sBAAsB,GAAG,YAAY,CAAC,CAAC;AAE7C,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,GACjD,IAAI,CAAC,cAAc,EAAE,uBAAuB,GAAG,oBAAoB,GAAG,WAAW,GAC7E,sBAAsB,GAAG,YAAY,CAAC,CAAC;AAE7C,qEAAqE;AACrE,wBAAgB,WAAW,CAAC,KAAK,EAAE,kBAAkB,GAAG,GAAG,CAU1D;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,GAAG,CAU5D;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,GAAG,GAAG,CAIxF"}

package/dist/recipe.js

@@ -0,0 +1,61 @@
+/**
+ * §4.3 — local recipe recomputation, the verify-and-sign tier.
+ *
+ * The nonce of a Daski EIP-3009 authorization is not random: it is a
+ * commitment to the whole deal. Recomputing it locally is what lets the
+ * bridge sign a server-proposed authorization without trusting the server —
+ * if our nonce and theirs disagree, the deal we were shown is not the deal
+ * we would be signing, and we refuse.
+ *
+ * These two functions mirror the gateway's `recipeNonce` / `recipeNonceV2`
+ * byte for byte. Changing either is a protocol break, not a refactor.
+ */
+import { encodeAbiParameters, keccak256, stringToHex } from "viem";
+/** `keccak256("DaskiStandardExactOrderV1")` — the v1 recipe domain separator. */
+export const RECIPE_NONCE_DOMAIN_V1 = keccak256(stringToHex("DaskiStandardExactOrderV1"));
+/** `keccak256("DaskiStandardExactOrderV2")` — the v2 recipe domain separator. */
+export const RECIPE_NONCE_DOMAIN_V2 = keccak256(stringToHex("DaskiStandardExactOrderV2"));
+/** The eleven-slot ABI layout shared by both recipe versions. */
+const RECIPE_ABI = [
+    { type: "bytes32" }, // domain separator
+    { type: "uint256" }, // chainId
+    { type: "address" }, // canonicalToken
+    { type: "address" }, // payer
+    { type: "address" }, // splitter
+    { type: "uint256" }, // grossAmount
+    { type: "bytes32" }, // deal slot 1: runtimeCommitmentHash / listingManifestHash
+    { type: "bytes32" }, // deal slot 2: providerIntentHash / providerOfferHash
+    { type: "bytes32" }, // quoteHash
+    { type: "bytes32" }, // canonicalRequestHash
+    { type: "bytes32" }, // orderNonce
+];
+function encodeRecipe(domain, facts, dealSlot1, dealSlot2, quoteHash, canonicalRequestHash, orderNonce) {
+    return keccak256(encodeAbiParameters(RECIPE_ABI, [
+        domain,
+        BigInt(facts.chainId),
+        facts.canonicalToken,
+        facts.payer,
+        facts.splitter,
+        facts.grossAmount,
+        dealSlot1,
+        dealSlot2,
+        quoteHash,
+        canonicalRequestHash,
+        orderNonce,
+    ]));
+}
+/** `recipeNonce` — the v1 layout, for `recipe-bound-v1` listings. */
+export function recipeNonce(input) {
+    return encodeRecipe(RECIPE_NONCE_DOMAIN_V1, input, input.listingManifestHash, input.providerOfferHash, input.quoteHash, input.canonicalRequestHash, input.orderNonce);
+}
+/** `recipeNonceV2` — the catalog-driven layout, for `recipe-bound-v2` listings. */
+export function recipeNonceV2(input) {
+    return encodeRecipe(RECIPE_NONCE_DOMAIN_V2, input, input.runtimeCommitmentHash, input.providerIntentHash, input.quoteHash, input.canonicalRequestHash, input.orderNonce);
+}
+/** Recomputes the authorization nonce a binding commits to, at either version. */
+export function deriveBindingNonce(binding, facts) {
+    return binding.profile === "recipe-bound-v2"
+        ? recipeNonceV2({ ...facts, ...binding })
+        : recipeNonce({ ...facts, ...binding });
+}
+//# sourceMappingURL=recipe.js.map

package/dist/recipe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipe.js","sourceRoot":"","sources":["../src/recipe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,WAAW,EAA0B,MAAM,MAAM,CAAC;AAG3F,iFAAiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAQ,SAAS,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAC/F,iFAAiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAQ,SAAS,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAgB/F,iEAAiE;AACjE,MAAM,UAAU,GAAG;IACjB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,mBAAmB;IACxC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,UAAU;IAC/B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,iBAAiB;IACtC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ;IAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW;IAChC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,cAAc;IACnC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,2DAA2D;IAChF,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,sDAAsD;IAC3E,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY;IACjC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,uBAAuB;IAC5C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,aAAa;CAC1B,CAAC;AAEX,SAAS,YAAY,CACnB,MAAW,EACX,KAAyB,EACzB,SAAc,EACd,SAAc,EACd,SAAc,EACd,oBAAyB,EACzB,UAAe;IAEf,OAAO,SAAS,CAAC,mBAAmB,CAAC,UAAU,EAAE;QAC/C,MAAM;QACN,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QACrB,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,KAAK;QACX,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,WAAW;QACjB,SAAS;QACT,SAAS;QACT,SAAS;QACT,oBAAoB;QACpB,UAAU;KACX,CAAC,CAAC,CAAC;AACN,CAAC;AAUD,qEAAqE;AACrE,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,OAAO,YAAY,CACjB,sBAAsB,EACtB,KAAK,EACL,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,oBAAoB,EAC1B,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,OAAO,YAAY,CACjB,sBAAsB,EACtB,KAAK,EACL,KAAK,CAAC,qBAAqB,EAC3B,KAAK,CAAC,kBAAkB,EACxB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,oBAAoB,EAC1B,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,OAAqB,EAAE,KAAyB;IACjF,OAAO,OAAO,CAAC,OAAO,KAAK,iBAAiB;QAC1C,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC;QACzC,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/dist/register.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Registration helper.
+ *
+ * `x402Client.register(network, client)` maps one network to one handler, so
+ * registering the composite for a network is exactly how the wrap takes
+ * effect: Daski challenges take the validating path, everything else reaches
+ * the stock handler through the composite unchanged. We never register a
+ * second `exact` handler alongside the stock one, and we never rename the
+ * scheme.
+ */
+import type { Address } from "viem";
+import { DaskiExactEvmScheme, type SchemeNetworkClientLike } from "./scheme.js";
+import type { PolicyConfig } from "./policy.js";
+import type { PurchaseContextResolver } from "./scheme.js";
+import type { SignerAdapter } from "./signer.js";
+/** Minimal structural view of the host's `x402Client`. */
+export interface X402ClientLike {
+    register(network: string, client: SchemeNetworkClientLike): unknown;
+}
+export interface RegisterOptions {
+    /** CAIP-2 network, e.g. `eip155:84532`. */
+    network: string;
+    signer: SignerAdapter;
+    payerAddress: Address;
+    policy: PolicyConfig;
+    /** The stock `ExactEvmScheme` instance to wrap. */
+    stock: SchemeNetworkClientLike;
+    resolvePurchaseContext: PurchaseContextResolver;
+    now?: () => number;
+}
+/**
+ * Wraps `stock` in the Daski composite and registers it for one network.
+ * Returns the composite so the caller can inspect or reuse it.
+ */
+export declare function registerDaskiExactEvmScheme(client: X402ClientLike, options: RegisterOptions): DaskiExactEvmScheme;
+//# sourceMappingURL=register.d.ts.map

package/dist/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAmC,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACjH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,0DAA0D;AAC1D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC;CACrE;AAED,MAAM,WAAW,eAAe;IAC9B,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,YAAY,CAAC;IACrB,mDAAmD;IACnD,KAAK,EAAE,uBAAuB,CAAC;IAC/B,sBAAsB,EAAE,uBAAuB,CAAC;IAChD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,eAAe,GACvB,mBAAmB,CAKrB"}